Set up Semgrep Guardian with Cursor - Semgrep

Integrate Semgrep Guardian with Cursor through hooks and MCP.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

1

Install the Semgrep CLI.

2

Find Semgrep in the Cursor Plugin Marketplace, or open Cursor > ⌘⇧J > Plugins. Search “Semgrep” and click Add to Cursor.

3

Restart Cursor to apply configuration.

4

In Cursor’s chat, run the /setup-semgrep-plugin skill to finish wiring up the plugin.The plugin uses Cursor hooks (afterFileEdit and stop) to scan code as the agent writes it, and exposes Semgrep tools through Cursor MCP.

What rules does this setup use?

This integration has no Guardian-specific policy available. It pulls all rules enabled on Policies. See Rules and configuration for how this differs from the Claude Code and Codex plugins.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration